-
Notifications
You must be signed in to change notification settings - Fork 669
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
NOISSUE - Fix security warnings for dependencies #1452
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
054923f
to
729d219
Compare
@dusanb94 CI is failing. Didn't have a chance to checkout |
Signed-off-by: dusanb94 <dusan.borovcanin@mainflux.com>
I redeployed, to see if that was a hiccup... |
This feature is introduced here: https://tip.golang.org/doc/go1.17#vendor. Signed-off-by: dusanb94 <dusan.borovcanin@mainflux.com>
Codecov Report
@@ Coverage Diff @@
## master #1452 +/- ##
==========================================
- Coverage 70.92% 70.90% -0.03%
==========================================
Files 123 123
Lines 9564 9564
==========================================
- Hits 6783 6781 -2
- Misses 2254 2256 +2
Partials 527 527
Continue to review full report at Codecov.
|
* Fix security warnings for dependencies Signed-off-by: dusanb94 <dusan.borovcanin@mainflux.com> * Omit `.mod` and `.sum` files in dependencies This feature is introduced here: https://tip.golang.org/doc/go1.17#vendor. Signed-off-by: dusanb94 <dusan.borovcanin@mainflux.com> Signed-off-by: Burak Sekili <buraksekili@gmail.com>
* Fix security warnings for dependencies Signed-off-by: dusanb94 <dusan.borovcanin@mainflux.com> * Omit `.mod` and `.sum` files in dependencies This feature is introduced here: https://tip.golang.org/doc/go1.17#vendor. Signed-off-by: dusanb94 <dusan.borovcanin@mainflux.com>
Signed-off-by: dusanb94 dusan.borovcanin@mainflux.com
What does this do?
This pull request fixes security vulnerabilities detected by the Dependabot.
Which issue(s) does this PR fix/relate to?
There is no such issue.
List any changes that modify/break current functionality
There are no such changes. Vulnerable libs are replaced by compatible ones or by patched versions of the same.
Have you included tests for your changes?
Yes.
Did you document any new/modified functionality?
No.
Notes
N/A